Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383030303a3a2f33332d3333203d3e20323731343636.roa
File:                     323830343a376266383a383030303a3a2f33332d3333203d3e20323731343636.roa (raw, json)
Hash identifier:          GhwOeSHbJ8SIujQLmMH2YWE+TjheM4Fp5R6kiU4EMxo=
Subject key identifier:   88:3E:96:5F:DD:5E:71:9C:2B:5F:40:4F:9B:81:61:02:E8:83:85:A0
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       5D26CDB5448119725F0BA1C71E896B0E9691A720
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383030303a3a2f33332d3333203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:49 +0000
ROA not before:           Wed 28 Feb 2024 20:10:49 +0000
ROA not after:            Wed 26 Feb 2025 20:15:49 +0000
asID:                     271466
IP address blocks:        2804:7bf8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:26:cd:b5:44:81:19:72:5f:0b:a1:c7:1e:89:6b:0e:96:91:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:49 2024 GMT
            Not After : Feb 26 20:15:49 2025 GMT
        Subject: CN=883E965FDD5E719C2B5F404F9B816102E88385A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:19:1f:da:e8:4f:2d:45:64:33:0c:e2:62:
                    68:35:83:92:26:80:d2:3e:ac:94:3f:9f:79:df:4d:
                    d8:a6:14:f9:05:06:b3:11:5f:a8:7a:89:a7:75:02:
                    9a:5b:1e:f5:f0:47:78:08:68:ff:0b:a4:90:48:b6:
                    0d:4e:9e:02:02:c4:16:12:10:a5:64:b9:bb:03:75:
                    97:21:64:e4:6f:dd:5f:93:38:67:a7:ab:22:2f:dd:
                    07:e1:e6:4e:29:b6:c3:90:08:40:eb:9a:30:ed:b4:
                    5b:f3:ed:18:65:78:c9:f6:0d:fb:f5:b9:44:e5:f3:
                    12:4e:c8:79:c7:f5:ca:f0:e6:99:6d:72:40:a6:27:
                    c1:45:52:ce:1c:bd:4f:27:65:e9:fa:61:d5:a9:29:
                    d9:88:c4:5a:ae:c0:bb:92:c2:76:ae:bf:1d:d4:15:
                    a3:cd:86:15:8a:e2:f4:79:09:ac:39:f7:42:d0:0a:
                    dd:f6:36:88:b3:32:1a:82:1a:a2:ac:c7:da:f5:4d:
                    f4:12:06:ad:e4:f0:67:4c:58:64:46:9e:ac:59:b6:
                    4f:e2:d7:d8:aa:cb:7c:1d:7e:a0:a8:84:41:66:e6:
                    a7:2e:4b:06:c3:7c:58:11:97:06:a9:bc:a5:c3:67:
                    a5:b3:45:ee:7b:eb:89:f1:e6:6b:06:a3:2a:f7:26:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:96:5F:DD:5E:71:9C:2B:5F:40:4F:9B:81:61:02:E8:83:85:A0
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383030303a3a2f33332d3333203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bd:a2:41:96:7c:08:93:0e:90:01:e4:21:6e:18:aa:74:f6:2c:
         61:4c:3c:bd:56:1d:76:23:a1:6c:38:59:0a:1a:35:f1:3d:31:
         fa:02:99:e5:c5:ad:5b:25:29:2f:76:78:47:d7:57:04:3f:4a:
         f4:ec:83:12:c0:79:89:6c:d0:07:b8:cb:d5:7b:f2:5e:58:24:
         a3:be:48:a1:2f:4a:07:8d:62:67:1e:ca:bc:02:f8:70:9d:dc:
         e8:89:c8:eb:21:d5:32:5e:67:2e:3a:ba:95:65:d3:74:f6:76:
         5c:a7:91:34:94:83:ae:26:17:95:11:e5:70:09:7a:6e:ea:7b:
         f8:3a:47:62:6e:84:37:7c:31:dc:d7:1b:03:f1:af:5e:23:ee:
         5e:ed:4c:59:d7:85:87:47:01:d7:38:fc:64:c2:63:79:6f:f4:
         80:62:57:5b:d3:71:8f:79:55:35:d8:35:5b:f2:f2:65:e2:07:
         33:19:5d:60:04:7b:04:1b:19:f7:75:89:66:8a:a0:c6:0f:02:
         dd:c5:8f:f8:45:c4:ed:0f:0e:b7:db:d2:44:51:71:2d:7c:80:
         5c:f0:74:2c:3b:2c:8e:4f:41:9c:43:fb:bb:21:d5:af:a7:56:
         9c:ab:13:8f:78:85:51:59:4a:33:dd:7e:66:44:4e:1c:a4:2c:
         d5:a7:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:16:28 2025 by rpki-client